Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
File: Dh8fRS7maY6Z38tOP1rus7wlA4U.mft (raw, json)
Hash identifier: QzY3pI1yye7LxBEytRPrij8jL+8l1/UVcqjGMHAQUfI=
Subject key identifier: 28:6E:1D:B6:CD:A3:17:54:92:FC:20:77:38:2A:DC:D0:09:91:26:D9
Authority key identifier: 0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
Certificate issuer: /CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Certificate serial: 019A4E4F833D0F03A3FD2CB54B91A072ED32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
Manifest number: 1107
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: 69j8k9W_Kz202mE3W0ylnRGyMyQ.roa (hash: VQv9gDwWX0bKpqI6qovNd6HvrIeep8UuZ4eE64gS7zI=)
2: Dh8fRS7maY6Z38tOP1rus7wlA4U.crl (hash: mJ/1O+EyNMuLiQqBWRM0ShD0hHsKrhZWCqedld1gyoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:83:3d:0f:03:a3:fd:2c:b5:4b:91:a0:72:ed:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e1f1f452ee6698e99dfcb4e3f5aeeb3bc250385
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=286e1db6cda3175492fc2077382adcd0099126d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:91:66:40:16:f0:29:3e:6e:03:1a:70:2a:
31:75:18:18:1e:70:54:0b:5c:ec:96:ac:dd:3e:c2:
ad:f6:9f:fe:58:7b:b8:d6:70:95:f3:c7:ab:b5:08:
09:a3:76:92:1a:95:18:46:52:76:34:5a:46:42:22:
66:f2:2b:2b:84:be:cb:e1:b9:a9:49:4c:54:e3:26:
08:9b:0b:e2:3b:a0:9a:72:2b:4d:73:b5:01:73:b6:
fa:cc:8e:91:a1:56:5e:48:ae:a7:b0:b2:54:66:4f:
23:ac:09:d5:40:8b:11:8a:92:1c:58:23:db:bf:b4:
af:62:18:07:ae:bb:44:5d:96:44:57:a0:cc:99:97:
aa:90:13:d8:ae:7a:1d:87:81:66:81:e5:9a:2a:b7:
17:56:31:03:95:59:0b:81:1a:1f:b2:d9:fe:d3:8f:
b7:a3:59:a3:83:c1:64:36:dd:ce:a5:d1:24:8f:03:
82:fa:cf:2e:65:1a:35:49:1c:67:d5:d0:d6:50:1d:
8f:c2:c4:cf:0a:71:9f:c2:9b:f6:2d:45:c5:a5:3d:
cc:5f:d0:b3:f3:22:8f:55:1e:66:b7:c7:a7:31:9c:
a5:cf:ad:e2:88:b2:aa:17:43:df:c6:e5:28:7c:27:
92:6b:78:94:ff:28:49:b2:4b:c8:12:bb:da:58:64:
de:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6E:1D:B6:CD:A3:17:54:92:FC:20:77:38:2A:DC:D0:09:91:26:D9
X509v3 Authority Key Identifier:
keyid:0E:1F:1F:45:2E:E6:69:8E:99:DF:CB:4E:3F:5A:EE:B3:BC:25:03:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh8fRS7maY6Z38tOP1rus7wlA4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/80f74e-c9d5-4aa3-bad7-b19fba03c06f/1/Dh8fRS7maY6Z38tOP1rus7wlA4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:30:3e:5a:05:73:97:8e:53:43:31:99:99:c1:20:ae:d6:2b:
02:0c:1c:1a:d9:39:dc:7a:e0:18:cf:a9:0f:e5:10:92:f9:c9:
45:11:2c:5c:66:01:b0:76:8b:81:3f:4a:24:ec:ef:ea:dc:03:
6d:ac:e9:6a:91:0f:02:58:6d:b4:a2:fe:ec:7e:26:ec:f1:53:
c2:aa:ca:e8:f6:4c:8f:66:84:40:af:ab:dc:4b:e6:e3:47:b1:
da:4d:a0:39:f2:ac:df:bb:8e:26:a1:38:99:07:5c:6e:ca:cb:
1a:78:d1:3a:b6:c1:3d:ee:61:fc:76:cd:5e:7c:f7:bd:05:42:
95:ce:74:a0:2a:7d:10:bb:ff:44:c1:bd:6f:04:40:79:8e:e0:
33:8e:ac:5a:15:96:e4:d6:08:21:11:45:c1:2d:83:31:5c:e7:
54:64:74:49:30:80:3d:9c:8b:72:22:fd:76:df:43:41:39:5c:
6c:cf:c6:2b:81:5c:97:32:5f:89:b7:8e:b1:77:a0:cb:2c:4b:
42:98:9c:d2:3d:cf:54:4d:6b:91:51:68:eb:8e:bd:0f:aa:17:
50:bb:6b:a8:ed:f8:e9:1a:c5:21:e8:79:f3:9c:6f:11:30:83:
5e:e2:b3:a7:a9:20:9f:6f:b0:93:00:3f:5b:74:5e:5a:d6:f6:
e3:65:3e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:14 2025 by rpki-client